last executing test programs: 15m21.735013792s ago: executing program 4 (id=1917): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x2, 0x100000000], [0x1, 0x1, 0x6, 0x2ca, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x7c, 0x8, 0x2ad6, 0x8, 0x1, 0x0, 0xa, 0x80000001, 0xd, 0x10001, 0xd, 0x5, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x4, 0x7, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10001, 0x1000, 0x2, 0x200000008, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x4, 0xfc72, 0x9, 0x2000000010, 0x7, 0x2, 0x6, 0x81, 0x2, 0x1, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xf000000000000000, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0xd13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(r0, &(0x7f0000000000)=""/42, 0x2a) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000240)={0x101, 0x8, {}, {0xffffffffffffffff}, 0x9, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000280)={0x8a0, 0x6, {}, {r2}, 0x8, 0x6}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) getdents(0xffffffffffffffff, &(0x7f0000000500)=""/198, 0xc6) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15m20.615086884s ago: executing program 4 (id=1919): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 15m20.269893261s ago: executing program 4 (id=1922): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x2, @mcast1, 0xa3d7}, 0x1c, 0x0}}], 0x1, 0x8c0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x40000, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x27a}, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc0000000001010400000000000000000200000024"], 0xdc}}, 0x0) 15m19.152284311s ago: executing program 4 (id=1926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 15m17.932434368s ago: executing program 4 (id=1928): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 15m17.066448618s ago: executing program 4 (id=1932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) 15m0.929065448s ago: executing program 32 (id=1932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) 4.499378546s ago: executing program 1 (id=5866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@my=0x1}) close_range(r4, r1, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x20000080) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) fchdir(r6) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) 4.142439887s ago: executing program 5 (id=5870): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) accept$alg(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000580)={0x0, 0x937, 0x400, 0x0, 0x41000333}, &(0x7f0000000080)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f00000006c0)=""/230, 0xe6}], 0x1}) io_uring_enter(r1, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 3.088042083s ago: executing program 1 (id=5874): mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 3.011527013s ago: executing program 3 (id=5875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 2.952295195s ago: executing program 5 (id=5877): creat(0x0, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000540)=ANY=[@ANYBLOB="0416"], 0x2, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) 2.880119205s ago: executing program 1 (id=5878): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, &(0x7f0000000080)) 2.764560769s ago: executing program 5 (id=5880): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x468, 0x24, 0xf0b, 0x70bd2f, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x4, 0xe, 0x24, 0x2}, {0x6, 0x0, 0xfff3, 0x8, 0xfb, 0xbc}, 0x0, 0x7, 0x6a1}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x0, 0x7, 0x8, 0x2, 0x9, 0x5, 0x7, 0x80000, 0x6, 0x3880, 0x2, 0x401, 0x9, 0x3, 0x5, 0x1, 0x5, 0x6, 0x1, 0xb81, 0x2, 0x200, 0xfffffffe, 0x1000, 0x14, 0x100, 0x1, 0x9, 0x2, 0x0, 0xfffffffd, 0x1b34963d, 0xff, 0xadb, 0x2ccd, 0x2, 0x84, 0x7, 0x0, 0x1, 0xffffffff, 0x9c, 0x7, 0x1, 0x3, 0x5cce, 0x4, 0x200, 0x8dbe, 0x2eccd818, 0x0, 0x6, 0xdd, 0x9, 0x35, 0x4, 0x2, 0x8, 0x8, 0x1000, 0x80, 0x7f, 0x3, 0x5, 0x9, 0x7, 0x4, 0x8, 0x4, 0x6, 0x2, 0x5, 0x7, 0x6, 0x1, 0x6, 0x200, 0x6, 0x80, 0x5, 0x0, 0x77, 0x1, 0x8, 0xd, 0x40, 0x8, 0x80000001, 0x8, 0x7fffffff, 0x7, 0xf, 0x0, 0x4, 0x4c, 0xfffff801, 0x4, 0x7beb, 0xfffffffa, 0x2, 0x6, 0x2, 0x6, 0x3, 0x6, 0x1, 0x6, 0xa, 0x8, 0x2, 0x7fffffff, 0x2, 0x8, 0x2, 0x8000, 0x5, 0x5, 0x80000000, 0x3, 0x628, 0x6, 0x7, 0xc, 0x0, 0x1, 0x8001, 0x7, 0xa, 0xfc, 0x1, 0x9, 0x9, 0x10000, 0x0, 0x6, 0x3, 0xe, 0xd, 0x101, 0x7fff, 0x9, 0x7d691fa0, 0x800, 0xb, 0x8, 0x8, 0x6, 0x7, 0x4, 0xa, 0x16, 0xac, 0x0, 0x5, 0xfff, 0x4, 0x800, 0x9, 0xd8, 0xd9, 0x9, 0x5, 0x100, 0x9, 0x8, 0x4, 0x9, 0x2, 0xc, 0x0, 0x8, 0x8, 0x9, 0x5, 0x6, 0xffffff02, 0xa188, 0xd, 0x7f, 0xaca1, 0x80000000, 0x3, 0x0, 0x3, 0x7, 0x7ff, 0x0, 0x6, 0x800, 0x100, 0x0, 0x7, 0x17, 0x8, 0x3, 0x40, 0xc, 0x4, 0xfffffff7, 0x7fff, 0x1, 0x2, 0x5c, 0xfffffff9, 0x72, 0x0, 0x9, 0x6e, 0x1, 0x4, 0x296c699, 0x6, 0x7fffffff, 0x5, 0x3, 0x43c5, 0x1, 0x9, 0x2, 0x5, 0x2, 0x5, 0x1000000, 0x4cee, 0x12ce, 0x4, 0x6, 0x3, 0x4, 0x7ff, 0x800, 0x1, 0xffffffff, 0x80010001, 0x2000, 0x80, 0x766b, 0x0, 0x6, 0x0, 0x6, 0x0, 0x5f8, 0x5, 0xee30, 0x22, 0xffffffff, 0x4, 0x34, 0x3, 0x7, 0x23adb4be, 0x9, 0x6, 0x2]}, @TCA_TBF_RATE64={0xc, 0x4, 0x6151dd68ef18b6b1}]}}]}, 0x468}}, 0x4000010) 2.74622181s ago: executing program 3 (id=5881): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000010000610c0000000018"], 0x0, 0x32, 0x0, 0x0, 0x6, 0x10000}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x84, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xe, 0x1e60, 0x2, 0x0, 0x7, 0x3}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x5, 0xfffffe00, 0x0, 0x8af}}, {0x4}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800c801}, 0x20040000) 2.646035771s ago: executing program 5 (id=5883): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x89110161, 0x0, 0x0) 2.601053776s ago: executing program 3 (id=5884): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xe}, 0x400008c0) 2.482386223s ago: executing program 3 (id=5887): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r1) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.123644381s ago: executing program 2 (id=5894): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r1) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 2.039195663s ago: executing program 0 (id=5896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000e40)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000180)="d09f5c52e3f2c5e4392417256fd46c2d1da113104cfff39fd17c6b05e41af9cb", 0x20}], 0x1, 0x0, 0x0, 0xbdd3f384e8c0ab21}], 0x1, 0x0) 1.824106774s ago: executing program 1 (id=5897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010800000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 971.313398ms ago: executing program 0 (id=5898): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xe}, 0x400008c0) 936.748039ms ago: executing program 5 (id=5899): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xfffff000, 0xd, 0x0, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f2", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x12}, 0x50) 883.108341ms ago: executing program 3 (id=5900): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 795.559494ms ago: executing program 5 (id=5901): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0xff000000, 0xd, 0xf, {0x2, 0x20}, 0x4, 0x7f}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) semop(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) umount2(0x0, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x70}}, 0x4000000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x20000) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) 795.148785ms ago: executing program 0 (id=5902): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6a000000006411fffc8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e20"], 0x0) 794.087614ms ago: executing program 2 (id=5903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x12c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 753.563124ms ago: executing program 1 (id=5904): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd8", 0x28}], 0x1}, 0x24004010) 694.639294ms ago: executing program 3 (id=5905): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socket$alg(0x26, 0x5, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r5, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 652.565656ms ago: executing program 0 (id=5906): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000010000610c0000000018"], 0x0, 0x32, 0x0, 0x0, 0x6, 0x10000}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xe, 0x1e60, 0x2, 0x0, 0x7, 0x3}}, {0x4}}]}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x26, 0x2, 0x8, 0x3b0, 0x2, 0xfffff9e0, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x80, 0x5, 0xfffffe00, 0x0, 0x8af}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800c801}, 0x20040000) 614.744041ms ago: executing program 2 (id=5907): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpid() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x8841) 587.191774ms ago: executing program 1 (id=5908): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffd56, &(0x7f0000000380)=ANY=[@ANYBLOB="d06ef205adb3d8e77f893f9ff2d92bfeca834e838e64a3d292508370319dc8d9c4cf0b087cb4946ca39b3b39a9021766d1c5edf07b71a3703c0cd90592b555b0afe38cc06c1b00b6fc6f234e28c1bb2a7e5b178df5449653cb32296e041b67115d3dd3b2da93cba512eed8346137928adfd1d851705d1e5499627b1a198df9a619661e8c198fce4a166ab5ff1012c0c891def85d4252876e9d7e67f39c839a0b254a7f9dd83b996b05af2a2a616496d50f3b90c1bd48cabab8593e24faf7ac079ff8d369c6fa224e06cdb8fc9fb9f02b119b76e2015fec618da014c34d3c4dd4c4e7f147346e60261c7930144c5bd5218081934b92f540cdc967f72a89", @ANYRESHEX=r0]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) fanotify_init(0x8, 0x800) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) 518.10128ms ago: executing program 0 (id=5909): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) shutdown(r0, 0x1) 497.485362ms ago: executing program 2 (id=5910): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x8f4c, 0x10100}, &(0x7f0000000380), &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 406.300046ms ago: executing program 2 (id=5911): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000080)=""/175, 0xaf}, {&(0x7f0000000880)=""/165, 0xa5}, {0x0}, {&(0x7f0000000940)=""/151, 0x97}, {&(0x7f0000000a00)=""/237, 0xed}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/103, 0x67}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x9}, 0x2000) 228.306386ms ago: executing program 2 (id=5912): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x12000) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af36593", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40000022) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f00000063c0)=""/4070, 0xfe6}, {&(0x7f0000000880)=""/136, 0x88}, {&(0x7f00000073c0)=""/4118, 0x1016}, {&(0x7f0000000700)=""/249, 0xf9}], 0x5}, 0x0) 0s ago: executing program 0 (id=5913): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x40000000081, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0xf8, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0xf8}}, 0x844) kernel console output (not intermixed with test programs): to start timer. [ 1350.834592][ T994] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1351.029903][ T994] usb 4-1: Using ep0 maxpacket: 32 [ 1351.088323][T17586] syz_tun: entered allmulticast mode [ 1351.173062][ T994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.173090][ T994] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1351.173124][ T994] usb 4-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 1351.173145][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.190523][ T994] usb 4-1: config 0 descriptor?? [ 1351.608118][ T994] usb 4-1: string descriptor 0 read error: -71 [ 1351.616422][ T994] usb 4-1: USB disconnect, device number 10 [ 1351.648156][ T5884] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1351.818502][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 1351.839962][ T5884] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1351.839988][ T5884] usb 1-1: config 0 has no interface number 0 [ 1351.848469][ T5884] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1351.848494][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.848512][ T5884] usb 1-1: Product: syz [ 1351.848524][ T5884] usb 1-1: Manufacturer: syz [ 1351.848537][ T5884] usb 1-1: SerialNumber: syz [ 1351.854255][ T5884] usb 1-1: config 0 descriptor?? [ 1352.147389][T17586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.149481][T17586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.240417][ T1049] Bluetooth: hci4: Frame reassembly failed (-84) [ 1352.259519][ T5916] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1354.278201][ T5803] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1354.679309][ T5884] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 1354.687490][ T5884] usb 1-1: USB disconnect, device number 10 [ 1356.268666][T17626] fuse: root generation should be zero [ 1356.634981][T17633] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1357.972565][T17647] syz_tun: entered allmulticast mode [ 1358.463185][ T994] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1358.658236][ T994] usb 3-1: Using ep0 maxpacket: 8 [ 1358.660814][ T994] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1358.660836][ T994] usb 3-1: config 0 has no interface number 0 [ 1358.664931][ T994] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1358.664948][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.664957][ T994] usb 3-1: Product: syz [ 1358.664964][ T994] usb 3-1: Manufacturer: syz [ 1358.664971][ T994] usb 3-1: SerialNumber: syz [ 1358.668832][ T994] usb 3-1: config 0 descriptor?? [ 1359.440414][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3479'. [ 1359.516037][T17658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.521207][T17658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.690370][ T994] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 1362.733657][ T994] usb 3-1: USB disconnect, device number 9 [ 1366.062995][T17722] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1366.108173][ T1237] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1366.268263][ T1237] usb 1-1: Using ep0 maxpacket: 8 [ 1366.299428][ T1237] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1366.299464][ T1237] usb 1-1: config 0 has no interface number 0 [ 1366.307341][ T1237] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1366.307368][ T1237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.307386][ T1237] usb 1-1: Product: syz [ 1366.307398][ T1237] usb 1-1: Manufacturer: syz [ 1366.307410][ T1237] usb 1-1: SerialNumber: syz [ 1366.344355][ T1237] usb 1-1: config 0 descriptor?? [ 1366.669010][T17723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.669960][T17723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.852917][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.852984][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.072319][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3496'. [ 1367.829070][T17733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3497'. [ 1369.518714][T17742] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3501'. [ 1370.537330][ T1237] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 1370.555368][ T1237] usb 1-1: USB disconnect, device number 11 [ 1371.975268][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3509'. [ 1372.140675][T12045] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1372.369626][T12045] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1372.371415][T12045] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1372.371431][T12045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1372.371441][T12045] usb 6-1: Product: syz [ 1372.371448][T12045] usb 6-1: Manufacturer: syz [ 1372.371455][T12045] usb 6-1: SerialNumber: syz [ 1372.588190][ T1237] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1372.659872][T12045] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1372.738166][ T1237] usb 1-1: Using ep0 maxpacket: 8 [ 1372.763050][ T1237] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.763076][ T1237] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1372.799881][ T1237] usb 1-1: New USB device found, idVendor=2f86, idProduct=e092, bcdDevice=53.3f [ 1372.799911][ T1237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.799929][ T1237] usb 1-1: Product: syz [ 1372.799941][ T1237] usb 1-1: Manufacturer: syz [ 1372.799954][ T1237] usb 1-1: SerialNumber: syz [ 1372.878463][ T5795] usb 6-1: USB disconnect, device number 18 [ 1372.885424][ T5795] usblp0: removed [ 1373.730701][T17784] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1374.080770][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3514'. [ 1374.307754][T17789] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3515'. [ 1375.068201][ T1237] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1375.378891][ T1237] usb 3-1: Using ep0 maxpacket: 8 [ 1375.382529][ T1237] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1375.382554][ T1237] usb 3-1: config 0 has no interface number 0 [ 1375.411347][ T1237] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1375.411364][ T1237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.411374][ T1237] usb 3-1: Product: syz [ 1375.411381][ T1237] usb 3-1: Manufacturer: syz [ 1375.411388][ T1237] usb 3-1: SerialNumber: syz [ 1375.605331][ T1237] usb 3-1: config 0 descriptor?? [ 1377.049784][T17795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.053204][T17795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.536496][ T5795] usb 1-1: USB disconnect, device number 12 [ 1379.248904][T14525] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1379.451357][T14525] usb 1-1: config 0 has no interfaces? [ 1379.466770][T14525] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1379.466820][T14525] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.466831][T14525] usb 1-1: Product: syz [ 1379.466838][T14525] usb 1-1: Manufacturer: syz [ 1379.466845][T14525] usb 1-1: SerialNumber: syz [ 1379.509239][T14525] usb 1-1: config 0 descriptor?? [ 1379.839449][ T1237] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 1379.871444][ T1237] usb 3-1: USB disconnect, device number 10 [ 1380.072584][T17824] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3526'. [ 1380.138521][ T5884] usb 1-1: USB disconnect, device number 13 [ 1381.727876][T17843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1383.258156][T12045] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1383.474511][T12045] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.474538][T12045] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1383.477082][T12045] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1383.477111][T12045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.477129][T12045] usb 4-1: Product: syz [ 1383.477141][T12045] usb 4-1: Manufacturer: syz [ 1383.477154][T12045] usb 4-1: SerialNumber: syz [ 1383.558721][T12045] usb 4-1: config 0 descriptor?? [ 1383.773948][T14525] usb 4-1: USB disconnect, device number 11 [ 1384.306223][T14525] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1384.628899][T17865] syz_tun: entered allmulticast mode [ 1384.629724][T14525] usb 3-1: Using ep0 maxpacket: 8 [ 1384.674114][T14525] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1384.674143][T14525] usb 3-1: config 0 has no interface number 0 [ 1384.674183][T14525] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1384.674204][T14525] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1384.674227][T14525] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1384.674251][T14525] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1384.674288][T14525] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1384.674309][T14525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.710029][T14525] usb 3-1: config 0 descriptor?? [ 1384.770289][T14525] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1384.968245][ T5884] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1384.991074][T14525] usb 3-1: USB disconnect, device number 11 [ 1384.991167][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 1385.070244][T14525] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1385.070257][T17856] ldusb: No device or device unplugged -19 [ 1385.208144][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 1385.214133][ T5884] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1385.214160][ T5884] usb 6-1: config 0 has no interface number 0 [ 1385.295106][ T5884] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1385.295137][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.295154][ T5884] usb 6-1: Product: syz [ 1385.295167][ T5884] usb 6-1: Manufacturer: syz [ 1385.295179][ T5884] usb 6-1: SerialNumber: syz [ 1385.310469][ T5884] usb 6-1: config 0 descriptor?? [ 1385.803138][T17865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.804142][T17865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.974498][T17875] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3539'. [ 1389.238332][ T8851] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1389.388216][ T8851] usb 3-1: Using ep0 maxpacket: 8 [ 1389.412234][ T8851] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.412252][ T8851] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1389.419081][ T8851] usb 3-1: New USB device found, idVendor=2f86, idProduct=e092, bcdDevice=53.3f [ 1389.419163][ T8851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.419182][ T8851] usb 3-1: Product: syz [ 1389.419194][ T8851] usb 3-1: Manufacturer: syz [ 1389.419202][ T8851] usb 3-1: SerialNumber: syz [ 1390.068304][ T5884] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 1390.093368][ T5884] usb 6-1: USB disconnect, device number 19 [ 1390.631519][T17906] pic_ioport_write: 79 callbacks suppressed [ 1390.631533][T17906] kvm: pic: level sensitive irq not supported [ 1390.631581][T17906] picdev_read: 79 callbacks suppressed [ 1390.631590][T17906] kvm: pic: non byte read [ 1390.632089][T17906] kvm: pic: level sensitive irq not supported [ 1390.632133][T17906] kvm: pic: non byte read [ 1390.632277][T17906] kvm: pic: level sensitive irq not supported [ 1390.632313][T17906] kvm: pic: non byte read [ 1390.632454][T17906] kvm: pic: level sensitive irq not supported [ 1390.632490][T17906] kvm: pic: non byte read [ 1390.632628][T17906] kvm: pic: level sensitive irq not supported [ 1390.632663][T17906] kvm: pic: non byte read [ 1390.632800][T17906] kvm: pic: level sensitive irq not supported [ 1390.632835][T17906] kvm: pic: non byte read [ 1390.632978][T17906] kvm: pic: level sensitive irq not supported [ 1390.633013][T17906] kvm: pic: non byte read [ 1390.633161][T17906] kvm: pic: level sensitive irq not supported [ 1390.633196][T17906] kvm: pic: non byte read [ 1390.633333][T17906] kvm: pic: level sensitive irq not supported [ 1390.633368][T17906] kvm: pic: non byte read [ 1390.633508][T17906] kvm: pic: level sensitive irq not supported [ 1390.633544][T17906] kvm: pic: non byte read [ 1391.828248][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1391.979742][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1391.983222][ T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1391.983251][ T10] usb 6-1: config 0 has no interface number 0 [ 1391.983333][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1391.983356][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1391.983381][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1391.983417][ T10] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1391.983459][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1391.983479][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.000507][ T10] usb 6-1: config 0 descriptor?? [ 1392.021890][ T10] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1392.219646][ T5884] usb 6-1: USB disconnect, device number 20 [ 1392.223399][ T5884] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1393.346387][ T8851] usb 3-1: USB disconnect, device number 12 [ 1393.708866][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3551'. [ 1394.786298][T17950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3557'. [ 1398.828215][ T5884] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1398.957628][T17975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3566'. [ 1399.108133][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 1399.142758][ T5884] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1399.142788][ T5884] usb 1-1: config 0 has no interface number 0 [ 1399.142830][ T5884] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1399.142850][ T5884] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1399.142873][ T5884] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1399.142896][ T5884] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1399.142936][ T5884] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1399.142957][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.243005][ T5884] usb 1-1: config 0 descriptor?? [ 1399.269902][ T5884] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1399.546666][T14525] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1399.762669][ T994] usb 1-1: USB disconnect, device number 14 [ 1399.783151][ T994] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1399.833074][T14525] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1399.966622][T14525] usb 6-1: string descriptor 0 read error: -22 [ 1399.966830][T14525] usb 6-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40 [ 1399.966854][T14525] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.800162][T17975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1403.229851][T14525] usbhid 6-1:1.0: can't add hid device: -71 [ 1403.272217][T14525] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1403.313455][T14525] usb 6-1: USB disconnect, device number 21 [ 1404.308172][ T5884] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1404.458270][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 1404.460643][ T5884] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1404.460661][ T5884] usb 1-1: config 0 has no interface number 0 [ 1404.460697][ T5884] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1404.460709][ T5884] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1404.460722][ T5884] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1404.460734][ T5884] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1404.460758][ T5884] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1404.460769][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.463588][ T5884] usb 1-1: config 0 descriptor?? [ 1404.645894][ T5884] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1404.668221][ T994] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1404.818241][ T994] usb 2-1: Using ep0 maxpacket: 16 [ 1404.820487][ T994] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.820584][ T994] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1404.822848][ T994] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1404.822951][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.822962][ T994] usb 2-1: Product: syz [ 1404.822969][ T994] usb 2-1: Manufacturer: syz [ 1404.822975][ T994] usb 2-1: SerialNumber: syz [ 1404.941354][ T994] usb 2-1: config 0 descriptor?? [ 1405.118746][ T5795] usb 1-1: USB disconnect, device number 15 [ 1405.215493][ T5795] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1406.994374][T18071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1407.390736][ T5884] usb 2-1: USB disconnect, device number 8 [ 1411.573133][T18107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1411.764062][T18115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3608'. [ 1411.976922][T18120] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3609'. [ 1414.378161][ T5884] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1414.538120][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 1414.544613][ T5884] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1414.544643][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.544661][ T5884] usb 2-1: Product: syz [ 1414.544674][ T5884] usb 2-1: Manufacturer: syz [ 1414.544687][ T5884] usb 2-1: SerialNumber: syz [ 1414.577814][ T5884] usb 2-1: config 0 descriptor?? [ 1414.603122][ T5884] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1414.603845][ T5884] dvb-usb: bulk message failed: -22 (2/0) [ 1414.645605][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1414.646433][ T5884] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1414.646476][ T5884] usb 2-1: media controller created [ 1414.710509][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1415.069488][T18144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3616'. [ 1415.709240][T18164] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3622'. [ 1418.749102][ T5884] cxusb: set interface failed [ 1418.749125][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 1418.848552][T18202] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3634'. [ 1419.032454][ T5884] DVB: Unable to find symbol mt352_attach() [ 1419.032548][ T5884] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1420.138176][ T5884] rc_core: IR keymap rc-dvico-portable not found [ 1420.138196][ T5884] Registered IR keymap rc-empty [ 1420.141705][ T5884] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1420.145257][ T5884] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input6 [ 1420.354632][ T5884] dvb-usb: schedule remote query interval to 100 msecs. [ 1420.354651][ T5884] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1420.759863][ T5884] usb 2-1: USB disconnect, device number 9 [ 1420.773481][ T8851] dvb-usb: bulk message failed: -22 (1/0) [ 1420.904827][ T8851] dvb-usb: bulk message failed: -22 (1/0) [ 1422.204971][ T5884] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1422.548171][ T5884] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1422.727625][ T5884] usb 2-1: config 0 has no interfaces? [ 1422.730020][ T5884] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1422.730037][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.730054][ T5884] usb 2-1: Product: syz [ 1422.730061][ T5884] usb 2-1: Manufacturer: syz [ 1422.730068][ T5884] usb 2-1: SerialNumber: syz [ 1422.809607][ T5884] usb 2-1: config 0 descriptor?? [ 1423.203433][ T5884] usb 2-1: USB disconnect, device number 10 [ 1423.255095][T18245] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3647'. [ 1424.135012][T18265] pic_ioport_write: 77 callbacks suppressed [ 1424.135027][T18265] kvm: pic: level sensitive irq not supported [ 1424.135075][T18265] picdev_read: 77 callbacks suppressed [ 1424.135084][T18265] kvm: pic: non byte read [ 1424.135227][T18265] kvm: pic: level sensitive irq not supported [ 1424.135262][T18265] kvm: pic: non byte read [ 1424.135401][T18265] kvm: pic: level sensitive irq not supported [ 1424.135437][T18265] kvm: pic: non byte read [ 1424.135573][T18265] kvm: pic: level sensitive irq not supported [ 1424.135608][T18265] kvm: pic: non byte read [ 1424.135744][T18265] kvm: pic: level sensitive irq not supported [ 1424.135779][T18265] kvm: pic: non byte read [ 1424.135925][T18265] kvm: pic: level sensitive irq not supported [ 1424.135960][T18265] kvm: pic: non byte read [ 1424.136097][T18265] kvm: pic: level sensitive irq not supported [ 1424.136132][T18265] kvm: pic: non byte read [ 1424.136276][T18265] kvm: pic: level sensitive irq not supported [ 1424.188342][T18265] kvm: pic: non byte read [ 1424.188731][T18265] kvm: pic: level sensitive irq not supported [ 1424.188772][T18265] kvm: pic: non byte read [ 1424.188918][T18265] kvm: pic: level sensitive irq not supported [ 1424.188959][T18265] kvm: pic: non byte read [ 1426.508179][ T5884] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1426.998553][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1427.178131][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 1427.183623][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1427.220349][ T5884] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1427.220368][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.220378][ T5884] usb 1-1: Product: syz [ 1427.220385][ T5884] usb 1-1: Manufacturer: syz [ 1427.220392][ T5884] usb 1-1: SerialNumber: syz [ 1427.226986][ T5884] usb 1-1: config 0 descriptor?? [ 1427.262442][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1427.262470][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.262489][ T10] usb 2-1: Product: syz [ 1427.262502][ T10] usb 2-1: Manufacturer: syz [ 1427.262515][ T10] usb 2-1: SerialNumber: syz [ 1427.313977][ T10] usb 2-1: config 0 descriptor?? [ 1427.552185][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1427.947770][ T1237] usb 1-1: USB disconnect, device number 16 [ 1428.283855][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.286980][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.319060][T18321] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3673'. [ 1429.650203][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1429.686579][ T10] usb 2-1: USB disconnect, device number 11 [ 1430.998316][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1431.183917][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1431.183947][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.183964][ T10] usb 3-1: Product: syz [ 1431.183977][ T10] usb 3-1: Manufacturer: syz [ 1431.183990][ T10] usb 3-1: SerialNumber: syz [ 1431.230432][ T10] usb 3-1: config 0 descriptor?? [ 1431.467523][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1431.504659][ T5884] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1431.662256][ T5884] usb 6-1: device descriptor read/64, error -71 [ 1431.948925][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'. [ 1432.031916][ T5884] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1432.168483][ T5884] usb 6-1: device descriptor read/64, error -71 [ 1432.283340][ T5884] usb usb6-port1: attempt power cycle [ 1432.630129][ T5884] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1432.695175][ T5884] usb 6-1: device descriptor read/8, error -71 [ 1432.963488][ T5884] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1432.980439][ T5884] usb 6-1: device descriptor read/8, error -71 [ 1433.088525][ T5884] usb usb6-port1: unable to enumerate USB device [ 1433.611851][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1433.618429][ T10] usb 3-1: USB disconnect, device number 13 [ 1434.097284][ T5884] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1434.281990][ T5884] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1434.282018][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.282037][ T5884] usb 1-1: Product: syz [ 1434.282054][ T5884] usb 1-1: Manufacturer: syz [ 1434.282067][ T5884] usb 1-1: SerialNumber: syz [ 1434.285691][ T5884] usb 1-1: config 0 descriptor?? [ 1434.597281][ T5884] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1435.038157][ T1237] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1435.208288][ T1237] usb 3-1: Using ep0 maxpacket: 8 [ 1435.240623][ T1237] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1435.240648][ T1237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.240657][ T1237] usb 3-1: Product: syz [ 1435.240664][ T1237] usb 3-1: Manufacturer: syz [ 1435.240685][ T1237] usb 3-1: SerialNumber: syz [ 1435.245391][ T1237] usb 3-1: config 0 descriptor?? [ 1435.299905][ T1237] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1435.299955][ T1237] dvb-usb: bulk message failed: -22 (2/0) [ 1435.380323][ T1237] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1435.383109][ T1237] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1435.383167][ T1237] usb 3-1: media controller created [ 1435.447257][ T1237] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1436.668599][ T5884] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1436.672891][ T5884] usb 1-1: USB disconnect, device number 17 [ 1437.355958][ T1237] cxusb: set interface failed [ 1437.355971][ T1237] dvb-usb: bulk message failed: -22 (1/0) [ 1437.586154][ T1237] DVB: Unable to find symbol mt352_attach() [ 1437.586170][ T1237] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1437.818177][ T5871] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1437.828173][ T1237] rc_core: IR keymap rc-dvico-portable not found [ 1437.828192][ T1237] Registered IR keymap rc-empty [ 1437.833442][ T1237] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1437.880765][ T1237] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7 [ 1437.927747][ T1237] dvb-usb: schedule remote query interval to 100 msecs. [ 1437.927771][ T1237] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1437.978166][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 1437.979290][ T1237] usb 3-1: USB disconnect, device number 14 [ 1437.980260][ T5871] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.980281][ T5871] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1437.980311][ T5871] usb 4-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 1437.980332][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.031419][ T5795] dvb-usb: bulk message failed: -22 (1/0) [ 1438.090273][ T5871] usb 4-1: config 0 descriptor?? [ 1438.534924][ T5871] usb 4-1: string descriptor 0 read error: -71 [ 1438.537057][ T5871] usb 4-1: USB disconnect, device number 12 [ 1438.649975][ T1237] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1439.018203][ T1237] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1439.168139][ T1237] usb 3-1: Using ep0 maxpacket: 8 [ 1439.175531][ T1237] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.175557][ T1237] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1439.199084][ T1237] usb 3-1: New USB device found, idVendor=2f86, idProduct=e092, bcdDevice=53.3f [ 1439.199113][ T1237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.199129][ T1237] usb 3-1: Product: syz [ 1439.199141][ T1237] usb 3-1: Manufacturer: syz [ 1439.199154][ T1237] usb 3-1: SerialNumber: syz [ 1439.521733][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3712'. [ 1439.521749][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3712'. [ 1439.918166][ T5884] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1440.096714][ T5884] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1440.096744][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.096763][ T5884] usb 2-1: Product: syz [ 1440.096775][ T5884] usb 2-1: Manufacturer: syz [ 1440.096788][ T5884] usb 2-1: SerialNumber: syz [ 1440.142384][ T5884] usb 2-1: config 0 descriptor?? [ 1441.063239][ T5884] usb 2-1: USB disconnect, device number 12 [ 1441.608325][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1441.798681][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1441.836239][ T10] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.836256][ T10] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1441.839253][ T10] usb 4-1: New USB device found, idVendor=2f86, idProduct=e092, bcdDevice=53.3f [ 1441.839270][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.839280][ T10] usb 4-1: Product: syz [ 1441.839288][ T10] usb 4-1: Manufacturer: syz [ 1441.839295][ T10] usb 4-1: SerialNumber: syz [ 1442.235131][ T5884] usb 3-1: USB disconnect, device number 15 [ 1442.540226][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3724'. [ 1442.540418][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3724'. [ 1444.747507][T18481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1444.978207][ T5884] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1445.128599][ T994] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1445.259604][ T5884] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1445.259633][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.259652][ T5884] usb 6-1: Product: syz [ 1445.259665][ T5884] usb 6-1: Manufacturer: syz [ 1445.259677][ T5884] usb 6-1: SerialNumber: syz [ 1445.288192][ T994] usb 2-1: Using ep0 maxpacket: 16 [ 1445.290422][ T994] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1445.292850][ T994] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1445.292876][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.292894][ T994] usb 2-1: Product: syz [ 1445.292906][ T994] usb 2-1: Manufacturer: syz [ 1445.292919][ T994] usb 2-1: SerialNumber: syz [ 1445.320300][ T5884] usb 6-1: config 0 descriptor?? [ 1445.348450][ T994] usb 2-1: config 0 descriptor?? [ 1445.490198][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3736'. [ 1445.490354][T18506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3736'. [ 1445.520387][ T994] usb 4-1: USB disconnect, device number 13 [ 1445.563795][ T5884] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1446.134831][T18514] pic_ioport_write: 79 callbacks suppressed [ 1446.134853][T18514] kvm: pic: level sensitive irq not supported [ 1446.134920][T18514] picdev_read: 79 callbacks suppressed [ 1446.134933][T18514] kvm: pic: non byte read [ 1446.135231][T18514] kvm: pic: level sensitive irq not supported [ 1446.135281][T18514] kvm: pic: non byte read [ 1446.135559][T18514] kvm: pic: level sensitive irq not supported [ 1446.135605][T18514] kvm: pic: non byte read [ 1446.135824][T18514] kvm: pic: level sensitive irq not supported [ 1446.135922][T18514] kvm: pic: non byte read [ 1446.136138][T18514] kvm: pic: level sensitive irq not supported [ 1446.136183][T18514] kvm: pic: non byte read [ 1446.136465][T18514] kvm: pic: level sensitive irq not supported [ 1446.136504][T18514] kvm: pic: non byte read [ 1446.136848][T18514] kvm: pic: level sensitive irq not supported [ 1446.136957][T18514] kvm: pic: non byte read [ 1446.137190][T18514] kvm: pic: level sensitive irq not supported [ 1446.137229][T18514] kvm: pic: non byte read [ 1446.137521][T18514] kvm: pic: level sensitive irq not supported [ 1446.137565][T18514] kvm: pic: non byte read [ 1446.137790][T18514] kvm: pic: level sensitive irq not supported [ 1446.180128][T18514] kvm: pic: non byte read [ 1447.581108][ T5884] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1447.584911][ T5884] usb 6-1: USB disconnect, device number 26 [ 1448.369179][ T5884] usb 2-1: USB disconnect, device number 13 [ 1448.748933][T18556] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3751'. [ 1450.708132][ T994] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1450.872824][ T994] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1450.872853][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.872869][ T994] usb 1-1: Product: syz [ 1450.872876][ T994] usb 1-1: Manufacturer: syz [ 1450.872883][ T994] usb 1-1: SerialNumber: syz [ 1450.876492][ T994] usb 1-1: config 0 descriptor?? [ 1451.038424][T12045] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1451.091915][ T994] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1451.208119][T12045] usb 6-1: Using ep0 maxpacket: 8 [ 1451.210188][T12045] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1451.210205][T12045] usb 6-1: config 0 has no interface number 0 [ 1451.210268][T12045] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1451.210281][T12045] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1451.210293][T12045] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1451.210306][T12045] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1451.210328][T12045] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1451.210339][T12045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.216695][T12045] usb 6-1: config 0 descriptor?? [ 1451.333986][T12045] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1451.370999][ T5884] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1451.538958][ T5795] usb 6-1: USB disconnect, device number 27 [ 1451.539098][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 1451.544215][ T5795] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1451.547541][T18571] ldusb: No device or device unplugged -19 [ 1451.548153][ T5884] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1451.548177][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.548195][ T5884] usb 2-1: Product: syz [ 1451.548217][ T5884] usb 2-1: Manufacturer: syz [ 1451.548230][ T5884] usb 2-1: SerialNumber: syz [ 1451.651272][ T5884] usb 2-1: config 0 descriptor?? [ 1451.877866][ T5884] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1452.528856][T18587] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3762'. [ 1453.565330][ T5884] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1453.572093][ T994] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1453.638864][ T5884] usb 1-1: USB disconnect, device number 18 [ 1454.443301][ T10] usb 2-1: USB disconnect, device number 14 [ 1456.170286][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1456.328314][ T1237] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1457.835003][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1457.923571][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1457.923587][ T10] usb 4-1: config 0 has no interface number 0 [ 1457.923611][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1457.923622][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1457.923634][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1457.923647][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1457.923669][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1457.923680][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.015188][ T1237] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1458.015217][ T1237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.015235][ T1237] usb 6-1: Product: syz [ 1458.015248][ T1237] usb 6-1: Manufacturer: syz [ 1458.015261][ T1237] usb 6-1: SerialNumber: syz [ 1458.028388][ T10] usb 4-1: config 0 descriptor?? [ 1458.086534][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1458.168820][ T1237] usb 6-1: config 0 descriptor?? [ 1458.212067][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3772'. [ 1458.251748][ T10] usb 4-1: USB disconnect, device number 14 [ 1458.275189][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1458.381490][ T1237] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1460.273222][ T1237] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1460.294047][ T1237] usb 6-1: USB disconnect, device number 28 [ 1462.338284][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3791'. [ 1462.542199][T18677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1462.778234][T14525] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1462.791731][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1462.934167][T14525] usb 3-1: Using ep0 maxpacket: 8 [ 1462.946053][T14525] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1462.946079][T14525] usb 3-1: config 0 has no interface number 0 [ 1462.946132][T14525] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1462.946153][T14525] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1462.946176][T14525] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1462.946199][T14525] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1462.946234][T14525] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1462.946254][T14525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.051099][T14525] usb 3-1: config 0 descriptor?? [ 1463.097782][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1463.097803][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.097813][ T10] usb 6-1: Product: syz [ 1463.097821][ T10] usb 6-1: Manufacturer: syz [ 1463.097827][ T10] usb 6-1: SerialNumber: syz [ 1463.140435][T14525] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1463.413649][ T994] usb 3-1: USB disconnect, device number 16 [ 1463.413760][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 1463.440970][ T994] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1463.446235][T18680] ldusb: No device or device unplugged -19 [ 1464.640958][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1464.641098][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1464.641117][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1464.685241][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1464.726807][ T10] usb 6-1: USB disconnect, device number 29 [ 1466.093208][T18720] tipc: Enabling of bearer rejected, failed to enable media [ 1467.298745][T18738] syzkaller0: entered promiscuous mode [ 1467.298761][T18738] syzkaller0: entered allmulticast mode [ 1467.740353][ T10] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1467.926717][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 1467.930332][ T10] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1467.930350][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.930366][ T10] usb 4-1: Product: syz [ 1467.930373][ T10] usb 4-1: Manufacturer: syz [ 1467.930379][ T10] usb 4-1: SerialNumber: syz [ 1468.945163][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1469.391564][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3814'. [ 1469.426194][ T10] usb 4-1: USB disconnect, device number 15 [ 1471.391909][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3820'. [ 1471.508366][T18789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1471.858352][T14525] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1471.878161][T12045] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1472.020098][T14525] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1472.020123][T14525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.020148][T14525] usb 2-1: Product: syz [ 1472.020160][T14525] usb 2-1: Manufacturer: syz [ 1472.020172][T14525] usb 2-1: SerialNumber: syz [ 1472.072120][T12045] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1472.072149][T12045] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.072168][T12045] usb 3-1: Product: syz [ 1472.072181][T12045] usb 3-1: Manufacturer: syz [ 1472.072194][T12045] usb 3-1: SerialNumber: syz [ 1472.107223][T12045] usb 3-1: config 0 descriptor?? [ 1472.274694][T14525] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1472.274747][T14525] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1472.274764][T14525] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1472.332104][T12045] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1472.354322][T14525] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1472.486076][T14525] usb 2-1: USB disconnect, device number 15 [ 1474.385302][T12045] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1474.419384][T12045] usb 3-1: USB disconnect, device number 17 [ 1476.048247][T14525] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1476.208273][T14525] usb 2-1: Using ep0 maxpacket: 8 [ 1476.214947][T14525] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1476.214964][T14525] usb 2-1: config 0 has no interface number 0 [ 1476.214987][T14525] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1476.214999][T14525] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1476.215011][T14525] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1476.215024][T14525] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1476.215046][T14525] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1476.215129][T14525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.620578][T14525] usb 2-1: config 0 descriptor?? [ 1476.748522][T14525] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1476.901280][T14525] usb 2-1: USB disconnect, device number 16 [ 1476.901384][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 1476.926861][T14525] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1476.927011][T18854] ldusb: No device or device unplugged -19 [ 1478.556953][T18881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3848'. [ 1478.852679][ T8851] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 1479.005760][ T8851] usb 1-1: string descriptor 0 read error: -22 [ 1479.005878][ T8851] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1479.005897][ T8851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.017598][ T8851] usb 1-1: config 0 descriptor?? [ 1479.033355][ T8851] usbtest 1-1:0.0: FX2 device [ 1479.033374][ T8851] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1479.188327][ T994] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1479.253176][ T8851] usb 1-1: USB disconnect, device number 19 [ 1479.345209][ T994] usb 2-1: Using ep0 maxpacket: 32 [ 1479.347426][ T994] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.347450][ T994] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1479.347486][ T994] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 1479.347507][ T994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.355812][ T994] usb 2-1: config 0 descriptor?? [ 1479.602493][ T994] usb 2-1: string descriptor 0 read error: -71 [ 1479.613209][ T994] usb 2-1: USB disconnect, device number 17 [ 1480.219871][T18902] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1480.577799][T18906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3855'. [ 1480.968185][ T8851] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1481.171310][ T8851] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1481.171341][ T8851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.171358][ T8851] usb 3-1: Product: syz [ 1481.171370][ T8851] usb 3-1: Manufacturer: syz [ 1481.171383][ T8851] usb 3-1: SerialNumber: syz [ 1481.744135][ T8851] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1481.744190][ T8851] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1481.744208][ T8851] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1481.778861][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3860'. [ 1481.795907][ T8851] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1482.073915][ T8851] usb 3-1: USB disconnect, device number 18 [ 1482.450055][ T8851] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1482.655427][ T8851] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1482.655458][ T8851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.655475][ T8851] usb 4-1: Product: syz [ 1482.655488][ T8851] usb 4-1: Manufacturer: syz [ 1482.655501][ T8851] usb 4-1: SerialNumber: syz [ 1483.517612][ T8851] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1483.517670][ T8851] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1483.517688][ T8851] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1483.579825][ T8851] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1483.607285][ T8851] usb 4-1: USB disconnect, device number 16 [ 1484.616562][T18954] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1486.608204][ T8851] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1486.758233][ T8851] usb 4-1: Using ep0 maxpacket: 8 [ 1486.761573][ T8851] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.761598][ T8851] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1486.765838][ T8851] usb 4-1: New USB device found, idVendor=2f86, idProduct=e092, bcdDevice=53.3f [ 1486.765866][ T8851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.765884][ T8851] usb 4-1: Product: syz [ 1486.765896][ T8851] usb 4-1: Manufacturer: syz [ 1486.765909][ T8851] usb 4-1: SerialNumber: syz [ 1489.630299][T14525] usb 4-1: USB disconnect, device number 17 [ 1489.706637][T19014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3890'. [ 1489.721675][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.721718][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.745736][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1489.961091][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1489.963209][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1489.963226][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1489.963236][ T10] usb 6-1: Product: syz [ 1489.963243][ T10] usb 6-1: Manufacturer: syz [ 1489.963250][ T10] usb 6-1: SerialNumber: syz [ 1489.989418][T19021] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1490.198801][ T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1490.638547][T18999] Bluetooth: hci4: command 0x1003 tx timeout [ 1490.649784][ T5115] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1491.528158][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1492.435267][ T8851] usb 6-1: USB disconnect, device number 30 [ 1492.460676][ T8851] usblp0: removed [ 1492.517203][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1492.533196][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1492.533226][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1492.533244][ T10] usb 3-1: Product: syz [ 1492.533256][ T10] usb 3-1: Manufacturer: syz [ 1492.533325][ T10] usb 3-1: SerialNumber: syz [ 1492.552701][T19042] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3900'. [ 1492.790266][T19046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3902'. [ 1492.800443][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1493.969312][ C1] usblp0: nonzero write bulk status received: -71 [ 1494.428635][ T1237] usb 3-1: USB disconnect, device number 19 [ 1494.439798][ T1237] usblp0: removed [ 1494.892418][T19061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3903'. [ 1496.077344][T19085] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3912'. [ 1496.321193][T19089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3913'. [ 1498.067672][T19103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1498.169982][T19112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3921'. [ 1498.578182][ T1237] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1498.816130][T19125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3925'. [ 1498.838481][ T1237] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1498.838510][ T1237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.838527][ T1237] usb 2-1: Product: syz [ 1498.838539][ T1237] usb 2-1: Manufacturer: syz [ 1498.838550][ T1237] usb 2-1: SerialNumber: syz [ 1499.558296][ T1237] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1499.558355][ T1237] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1499.558847][ T1237] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1499.558882][ T1237] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1499.559929][ T1237] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1499.672291][ T1237] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1499.696647][ T1237] usb 2-1: USB disconnect, device number 18 [ 1500.071991][T12045] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1500.254558][T12045] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1500.254587][T12045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.254605][T12045] usb 4-1: Product: syz [ 1500.254618][T12045] usb 4-1: Manufacturer: syz [ 1500.254631][T12045] usb 4-1: SerialNumber: syz [ 1500.325624][T12045] usb 4-1: config 0 descriptor?? [ 1500.534702][T12045] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1501.418201][ T1237] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1501.531948][T19150] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1501.571599][ T1237] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1501.578380][ T1237] usb 2-1: string descriptor 0 read error: -22 [ 1501.578620][ T1237] usb 2-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40 [ 1501.578643][ T1237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.608325][T19154] syzkaller0: entered promiscuous mode [ 1502.608343][T19154] syzkaller0: entered allmulticast mode [ 1502.827653][T12045] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1502.843322][T12045] usb 4-1: USB disconnect, device number 18 [ 1502.881576][T15844] udevd[15844]: setting mode of /dev/bus/usb/004/018 to 020664 failed: No such file or directory [ 1502.883948][T15844] udevd[15844]: setting owner of /dev/bus/usb/004/018 to uid=0, gid=0 failed: No such file or directory [ 1503.970988][ T5916] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1504.378185][ T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1504.553011][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1504.553031][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.553042][ T10] usb 4-1: Product: syz [ 1504.553049][ T10] usb 4-1: Manufacturer: syz [ 1504.553056][ T10] usb 4-1: SerialNumber: syz [ 1504.616065][ T10] usb 4-1: config 0 descriptor?? [ 1504.830827][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1505.985820][T18999] Bluetooth: hci4: command 0x1003 tx timeout [ 1505.989623][ T5115] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1506.844821][ T1237] usbhid 2-1:1.0: can't add hid device: -32 [ 1506.844931][ T1237] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 1507.118139][ T5884] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1507.259748][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1507.269638][ T10] usb 4-1: USB disconnect, device number 19 [ 1507.374961][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 1507.407524][ T5884] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1507.407543][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.407553][ T5884] usb 6-1: Product: syz [ 1507.407559][ T5884] usb 6-1: Manufacturer: syz [ 1507.407567][ T5884] usb 6-1: SerialNumber: syz [ 1507.447878][ T5884] usb 6-1: config 0 descriptor?? [ 1507.464593][ T5884] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1507.464626][ T5884] dvb-usb: bulk message failed: -22 (2/0) [ 1507.515437][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1507.531846][ T5884] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1507.531902][ T5884] usb 6-1: media controller created [ 1507.565928][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1507.594383][ T10] usb 2-1: USB disconnect, device number 19 [ 1512.396753][ T5884] cxusb: set interface failed [ 1512.396768][ T5884] dvb-usb: bulk message failed: -22 (1/0) [ 1512.638942][T19258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3968'. [ 1512.676411][ T5884] DVB: Unable to find symbol mt352_attach() [ 1512.676423][ T5884] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1512.700027][T19254] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1512.990243][T19257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1513.029665][ T5884] rc_core: IR keymap rc-dvico-portable not found [ 1513.029686][ T5884] Registered IR keymap rc-empty [ 1513.031337][ T5884] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1513.034470][ T5884] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input8 [ 1513.082727][ T5884] dvb-usb: schedule remote query interval to 100 msecs. [ 1513.082749][ T5884] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1513.108635][ T5884] usb 6-1: USB disconnect, device number 31 [ 1514.306932][ T5884] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1519.488936][T19330] syzkaller0: entered promiscuous mode [ 1519.488962][T19330] syzkaller0: entered allmulticast mode [ 1519.548235][ T8851] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1519.710051][ T8851] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1519.710077][ T8851] usb 3-1: config 0 has no interface number 0 [ 1519.712447][ T8851] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1519.712473][ T8851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.712491][ T8851] usb 3-1: Product: syz [ 1519.712504][ T8851] usb 3-1: Manufacturer: syz [ 1519.712517][ T8851] usb 3-1: SerialNumber: syz [ 1519.771919][ T8851] usb 3-1: config 0 descriptor?? [ 1519.776524][ T8851] usb 3-1: selecting invalid altsetting 1 [ 1519.776622][ T8851] dvb_ttusb_budget: ttusb_init_controller: error [ 1519.776630][ T8851] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1519.970725][ T8851] DVB: Unable to find symbol stv0299_attach() [ 1520.069103][ T8851] DVB: Unable to find symbol tda8083_attach() [ 1520.069119][ T8851] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1520.112925][ T8851] usb 3-1: USB disconnect, device number 20 [ 1520.249578][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3997'. [ 1521.728290][ T8851] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1522.146806][T19375] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4008'. [ 1522.176696][ T8851] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1522.176724][ T8851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.176741][ T8851] usb 2-1: Product: syz [ 1522.176753][ T8851] usb 2-1: Manufacturer: syz [ 1522.176765][ T8851] usb 2-1: SerialNumber: syz [ 1522.215562][ T8851] usb 2-1: config 0 descriptor?? [ 1522.408198][ T5884] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 1522.435941][ T8851] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1522.586952][ T5884] usb 3-1: string descriptor 0 read error: -22 [ 1522.587152][ T5884] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1522.587174][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.624177][ T5884] usb 3-1: config 0 descriptor?? [ 1522.643985][ T5884] usbtest 3-1:0.0: FX2 device [ 1522.644005][ T5884] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1522.858230][ T10] usb 3-1: USB disconnect, device number 21 [ 1523.277213][T19393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4014'. [ 1523.500120][ T5884] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1523.678238][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 1523.710518][ T5884] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.710544][ T5884] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1523.718891][ T5884] usb 6-1: New USB device found, idVendor=2f86, idProduct=e092, bcdDevice=53.3f [ 1523.718920][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.718938][ T5884] usb 6-1: Product: syz [ 1523.718951][ T5884] usb 6-1: Manufacturer: syz [ 1523.719017][ T5884] usb 6-1: SerialNumber: syz [ 1524.102662][T19400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4016'. [ 1524.388822][T19400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1524.508199][ T5871] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1524.558502][T12045] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1524.619544][ T8851] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1524.639171][ T8851] usb 2-1: USB disconnect, device number 20 [ 1524.669823][ T5871] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1524.669851][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.669873][ T5871] usb 3-1: Product: syz [ 1524.669884][ T5871] usb 3-1: Manufacturer: syz [ 1524.669893][ T5871] usb 3-1: SerialNumber: syz [ 1524.730387][T12045] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.730414][T12045] usb 1-1: config 0 has no interfaces? [ 1524.733619][T12045] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1524.733646][T12045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.733665][T12045] usb 1-1: Product: syz [ 1524.733678][T12045] usb 1-1: Manufacturer: syz [ 1524.733690][T12045] usb 1-1: SerialNumber: syz [ 1524.821221][T12045] usb 1-1: config 0 descriptor?? [ 1525.045392][T12045] usb 1-1: USB disconnect, device number 20 [ 1525.230912][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1525.230967][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1525.230986][ T5871] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1525.280070][ T5871] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1525.459167][ T5871] usb 3-1: USB disconnect, device number 22 [ 1525.899724][ T8851] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1526.058936][ T8851] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1526.058979][ T8851] usb 2-1: config 0 has no interface number 0 [ 1526.062068][ T8851] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1526.062105][ T8851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.062125][ T8851] usb 2-1: Product: syz [ 1526.062136][ T8851] usb 2-1: Manufacturer: syz [ 1526.062149][ T8851] usb 2-1: SerialNumber: syz [ 1526.067465][ T8851] usb 2-1: config 0 descriptor?? [ 1526.088645][ T8851] usb 2-1: selecting invalid altsetting 1 [ 1526.092994][ T8851] dvb_ttusb_budget: ttusb_init_controller: error [ 1526.093074][ T8851] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1526.501931][ T8851] DVB: Unable to find symbol stv0299_attach() [ 1526.678307][ T8851] DVB: Unable to find symbol tda8083_attach() [ 1526.678318][ T8851] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1526.689572][ T8851] usb 2-1: USB disconnect, device number 21 [ 1526.881882][T15870] usb 6-1: USB disconnect, device number 32 [ 1527.414006][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4030'. [ 1528.833457][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4032'. [ 1530.295302][ T204] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1530.588174][T15870] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1531.688181][T15870] usb 6-1: Using ep0 maxpacket: 8 [ 1531.706840][T15870] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1531.706870][T15870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.706888][T15870] usb 6-1: Product: syz [ 1531.706901][T15870] usb 6-1: Manufacturer: syz [ 1531.706914][T15870] usb 6-1: SerialNumber: syz [ 1531.770241][T15870] usb 6-1: config 0 descriptor?? [ 1531.789698][T15870] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1531.789729][T15870] dvb-usb: bulk message failed: -22 (2/0) [ 1531.808617][ T5115] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1532.300230][T19483] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4037'. [ 1532.657492][T19486] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1532.672166][T15870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1532.673273][T15870] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1532.673320][T15870] usb 6-1: media controller created [ 1533.083888][T15870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1534.512154][T19495] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4044'. [ 1536.243332][T15870] cxusb: set interface failed [ 1536.243347][T15870] dvb-usb: bulk message failed: -22 (1/0) [ 1536.332271][T19507] syzkaller0: entered promiscuous mode [ 1536.332295][T19507] syzkaller0: entered allmulticast mode [ 1536.422732][T15870] DVB: Unable to find symbol mt352_attach() [ 1536.422743][T15870] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1536.500114][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4049'. [ 1536.566793][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.608111][T15870] rc_core: IR keymap rc-dvico-portable not found [ 1536.608131][T15870] Registered IR keymap rc-empty [ 1536.609148][T15870] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1536.610978][T15870] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input9 [ 1536.871370][T15870] dvb-usb: schedule remote query interval to 100 msecs. [ 1536.871394][T15870] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1536.898668][T15870] usb 6-1: USB disconnect, device number 33 [ 1537.203107][T19531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4054'. [ 1537.300923][T15870] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1537.398571][T19535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1537.785115][T19545] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4058'. [ 1538.560751][T15870] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1538.712617][T15870] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1538.712646][T15870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.712656][T15870] usb 3-1: Product: syz [ 1538.712663][T15870] usb 3-1: Manufacturer: syz [ 1538.712670][T15870] usb 3-1: SerialNumber: syz [ 1539.168149][T15870] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1539.168204][T15870] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1539.169040][T15870] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1539.169090][T15870] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1539.169704][T15870] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1540.030754][T15870] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1540.068160][T15870] usb 3-1: USB disconnect, device number 23 [ 1540.567444][T19575] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1540.948154][T15870] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1541.105111][T15870] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1541.105141][T15870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.105160][T15870] usb 1-1: Product: syz [ 1541.105172][T15870] usb 1-1: Manufacturer: syz [ 1541.105185][T15870] usb 1-1: SerialNumber: syz [ 1541.623994][T15870] usb 1-1: config 0 descriptor?? [ 1542.002260][T15870] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1542.653818][T19584] netlink: 124 bytes leftover after parsing attributes in process `syz.5.4069'. [ 1543.449939][T15870] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1543.508667][T15870] usb 1-1: USB disconnect, device number 21 [ 1544.080487][T19595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4072'. [ 1544.384773][T19598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4073'. [ 1544.801153][T19602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4075'. [ 1545.258181][ T5871] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1545.476794][ T5871] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1545.476824][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.476843][ T5871] usb 6-1: Product: syz [ 1545.476855][ T5871] usb 6-1: Manufacturer: syz [ 1545.476868][ T5871] usb 6-1: SerialNumber: syz [ 1546.319734][ T1237] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1546.540639][ T1237] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1546.540658][ T1237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.540668][ T1237] usb 4-1: Product: syz [ 1546.540675][ T1237] usb 4-1: Manufacturer: syz [ 1546.540682][ T1237] usb 4-1: SerialNumber: syz [ 1546.567427][ T1237] usb 4-1: config 0 descriptor?? [ 1546.797454][ T1237] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1547.288626][ T8851] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1547.289042][ T5871] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1547.289142][ T5871] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1547.289161][ T5871] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1547.369775][ T5871] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1547.424461][ T5871] usb 6-1: USB disconnect, device number 34 [ 1547.443918][ T8851] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1547.463849][ T8851] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1547.463871][ T8851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.463888][ T8851] usb 1-1: Product: syz [ 1547.463900][ T8851] usb 1-1: Manufacturer: syz [ 1547.463913][ T8851] usb 1-1: SerialNumber: syz [ 1547.527726][ T8851] usb 1-1: config 0 descriptor?? [ 1547.745837][ T8851] usb 1-1: USB disconnect, device number 22 [ 1548.851515][ T1237] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1548.876672][ T1237] usb 4-1: USB disconnect, device number 20 [ 1551.164089][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.164168][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.313133][ T1237] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1551.481658][ T1237] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1551.481679][ T1237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.481689][ T1237] usb 4-1: Product: syz [ 1551.481696][ T1237] usb 4-1: Manufacturer: syz [ 1551.481703][ T1237] usb 4-1: SerialNumber: syz [ 1551.485543][ T1237] usb 4-1: config 0 descriptor?? [ 1551.745673][ T1237] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1552.795151][T19704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4106'. [ 1553.765032][ T1237] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1553.770285][ T1237] usb 4-1: USB disconnect, device number 21 [ 1554.748207][T15870] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1555.057891][T15870] usb 3-1: Using ep0 maxpacket: 8 [ 1555.082615][T15870] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.082631][T15870] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1555.161506][T15870] usb 3-1: New USB device found, idVendor=2f86, idProduct=e092, bcdDevice=53.3f [ 1555.161543][T15870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.161560][T15870] usb 3-1: Product: syz [ 1555.161572][T15870] usb 3-1: Manufacturer: syz [ 1555.161584][T15870] usb 3-1: SerialNumber: syz [ 1555.748235][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1555.821227][ T5871] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1555.911712][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1555.913495][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1555.913511][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1555.913521][ T10] usb 6-1: Product: syz [ 1555.913528][ T10] usb 6-1: Manufacturer: syz [ 1555.913535][ T10] usb 6-1: SerialNumber: syz [ 1555.972817][ T5871] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1555.972843][ T5871] usb 1-1: config 0 has no interface number 0 [ 1555.975483][ T5871] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1555.975499][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.975509][ T5871] usb 1-1: Product: syz [ 1555.975516][ T5871] usb 1-1: Manufacturer: syz [ 1555.975523][ T5871] usb 1-1: SerialNumber: syz [ 1556.067048][ T5871] usb 1-1: config 0 descriptor?? [ 1556.105277][ T5871] usb 1-1: selecting invalid altsetting 1 [ 1556.105995][ T5871] dvb_ttusb_budget: ttusb_init_controller: error [ 1556.106006][ T5871] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1556.138917][ T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1556.451514][ T5871] DVB: Unable to find symbol stv0299_attach() [ 1556.731691][ T5871] DVB: Unable to find symbol tda8083_attach() [ 1556.731708][ T5871] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1556.804531][ T5871] usb 1-1: USB disconnect, device number 23 [ 1561.088283][ T5871] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1561.243021][ T5871] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1561.243050][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.243068][ T5871] usb 4-1: Product: syz [ 1561.243081][ T5871] usb 4-1: Manufacturer: syz [ 1561.243094][ T5871] usb 4-1: SerialNumber: syz [ 1561.280515][ T5871] usb 4-1: config 0 descriptor?? [ 1561.968965][ T5871] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1563.025042][ T1237] usb 6-1: USB disconnect, device number 35 [ 1563.099577][ T1237] usblp0: removed [ 1563.119545][ T5884] usb 3-1: USB disconnect, device number 24 [ 1563.698189][ T5884] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1563.851033][ T5884] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1563.983575][ T5884] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1563.983604][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.983633][ T5884] usb 3-1: Product: syz [ 1563.983646][ T5884] usb 3-1: Manufacturer: syz [ 1563.983658][ T5884] usb 3-1: SerialNumber: syz [ 1564.273352][ T5871] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1564.838283][ T5871] usb 4-1: USB disconnect, device number 22 [ 1564.851987][ T5884] usb 3-1: config 0 descriptor?? [ 1565.083115][ T5884] usb 3-1: USB disconnect, device number 25 [ 1565.857456][T19814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4140'. [ 1566.178765][T14525] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 1566.335627][T14525] usb 3-1: string descriptor 0 read error: -22 [ 1566.335793][T14525] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1566.335816][T14525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.385293][T14525] usb 3-1: config 0 descriptor?? [ 1566.413699][T14525] usbtest 3-1:0.0: FX2 device [ 1566.413721][T14525] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1566.608640][ T5884] usb 3-1: USB disconnect, device number 26 [ 1567.588152][T15870] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1567.813630][T15870] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1567.813658][T15870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.813673][T15870] usb 1-1: Product: syz [ 1567.813680][T15870] usb 1-1: Manufacturer: syz [ 1567.813687][T15870] usb 1-1: SerialNumber: syz [ 1567.817110][T15870] usb 1-1: config 0 descriptor?? [ 1568.031762][T15870] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1568.973683][T19851] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4152'. [ 1569.276575][T19853] syzkaller0: entered promiscuous mode [ 1569.276774][T19853] syzkaller0: entered allmulticast mode [ 1570.079865][T15870] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1570.112828][T15870] usb 1-1: USB disconnect, device number 24 [ 1570.482075][T19861] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1571.799438][T19880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4163'. [ 1571.999996][T19887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4166'. [ 1572.510067][T19894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1572.798274][T14525] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1572.798416][ T8851] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1572.990047][ T8851] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1572.990075][ T8851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.990093][ T8851] usb 1-1: Product: syz [ 1572.990125][ T8851] usb 1-1: Manufacturer: syz [ 1572.990138][ T8851] usb 1-1: SerialNumber: syz [ 1573.000423][ T8851] usb 1-1: config 0 descriptor?? [ 1573.236108][T14525] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1573.236137][T14525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.236155][T14525] usb 3-1: Product: syz [ 1573.236167][T14525] usb 3-1: Manufacturer: syz [ 1573.236179][T14525] usb 3-1: SerialNumber: syz [ 1573.237514][ T8851] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1574.320075][ T8851] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1574.330205][ T8851] usb 1-1: USB disconnect, device number 25 [ 1574.553462][T14525] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1574.553517][T14525] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1574.553536][T14525] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1574.613030][T19918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4175'. [ 1574.630343][T14525] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1574.658639][T14525] usb 3-1: USB disconnect, device number 27 [ 1575.487106][T19943] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1576.568217][ T5871] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1576.745840][ T5871] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1576.745867][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.745884][ T5871] usb 4-1: Product: syz [ 1576.745897][ T5871] usb 4-1: Manufacturer: syz [ 1576.745909][ T5871] usb 4-1: SerialNumber: syz [ 1576.746563][T19961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4188'. [ 1576.759711][ T5871] usb 4-1: config 0 descriptor?? [ 1577.213960][ T5871] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1579.367954][ T5871] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1579.377091][ T5871] usb 4-1: USB disconnect, device number 23 [ 1579.915191][T19991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4199'. [ 1580.341772][T20002] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1585.618165][ T8851] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 1585.815935][ T8851] usb 6-1: string descriptor 0 read error: -22 [ 1585.816015][ T8851] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1585.816027][ T8851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.844854][ T8851] usb 6-1: config 0 descriptor?? [ 1585.854286][ T8851] usbtest 6-1:0.0: FX2 device [ 1585.854305][ T8851] usbtest 6-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1586.085002][T20044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4211'. [ 1586.138858][T14525] usb 6-1: USB disconnect, device number 36 [ 1586.300431][T20050] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4213'. [ 1586.602095][T20050] bond0 (unregistering): left allmulticast mode [ 1586.602112][T20050] bond_slave_0: left allmulticast mode [ 1586.602123][T20050] bond_slave_1: left allmulticast mode [ 1586.602134][T20050] bond0 (unregistering): left promiscuous mode [ 1586.602140][T20050] bond_slave_0: left promiscuous mode [ 1586.602287][T20050] bond_slave_1: left promiscuous mode [ 1587.039419][T20050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1587.135275][T20050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1587.184099][T20050] bond0 (unregistering): Released all slaves [ 1587.330833][T20067] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4222'. [ 1587.333929][T20072] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4222'. [ 1587.334382][T20075] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4222'. [ 1587.467823][T20049] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1587.510687][T20049] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1588.341241][T20117] C: renamed from team_slave_0 (while UP) [ 1588.379835][T20117] netlink: 'syz.0.4243': attribute type 3 has an invalid length. [ 1588.379862][T20117] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4243'. [ 1588.932613][T20143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4256'. [ 1589.509380][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4273'. [ 1589.547597][T20180] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4272'. [ 1589.547741][T20180] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4272'. [ 1589.955562][T20198] netlink: 'syz.3.4282': attribute type 1 has an invalid length. [ 1590.467536][T20214] netlink: set zone limit has 4 unknown bytes [ 1590.504752][T20223] netlink: 'syz.3.4294': attribute type 6 has an invalid length. [ 1591.848438][T20281] netlink: 'syz.2.4323': attribute type 1 has an invalid length. [ 1591.977761][T20292] __nla_validate_parse: 3 callbacks suppressed [ 1591.977782][T20292] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4328'. [ 1592.100693][T20299] netlink: 'syz.0.4333': attribute type 1 has an invalid length. [ 1592.100717][T20299] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4333'. [ 1592.100753][T20299] netlink: 'syz.0.4333': attribute type 1 has an invalid length. [ 1592.100766][T20299] netlink: 638 bytes leftover after parsing attributes in process `syz.0.4333'. [ 1592.100780][T20299] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4333'. [ 1593.931932][T20387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4373'. [ 1596.124861][T20497] netlink: 'syz.5.4426': attribute type 1 has an invalid length. [ 1598.196320][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4477'. [ 1598.196346][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4477'. [ 1599.528560][T20668] openvswitch: netlink: Message has 4 unknown bytes. [ 1599.953375][T20689] netlink: 'syz.0.4519': attribute type 1 has an invalid length. [ 1600.456104][T20703] netlink: 'syz.2.4526': attribute type 1 has an invalid length. [ 1600.456129][T20703] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4526'. [ 1600.456144][T20703] netlink: 658 bytes leftover after parsing attributes in process `syz.2.4526'. [ 1600.456157][T20703] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4526'. [ 1600.790602][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4527'. [ 1600.904982][T20716] netlink: 'syz.2.4532': attribute type 1 has an invalid length. [ 1601.456357][T20742] netlink: 'syz.3.4545': attribute type 1 has an invalid length. [ 1602.665757][T20793] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4568'. [ 1602.789207][T20793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1602.868971][T20793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1602.925782][T20793] bond0 (unregistering): Released all slaves [ 1605.658198][T20947] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4642'. [ 1605.658244][T20947] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4642'. [ 1606.801387][T21013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4672'. [ 1606.924579][T21020] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4676'. [ 1607.868420][T21069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4698'. [ 1608.060355][T21079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4704'. [ 1608.431272][T21095] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4712'. [ 1608.434443][T21095] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4712'. [ 1609.040813][T21125] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4725'. [ 1609.041863][T21125] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4725'. [ 1609.442148][T21149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1609.982854][T21179] netlink: 'syz.0.4750': attribute type 1 has an invalid length. [ 1611.006651][T21234] __nla_validate_parse: 5 callbacks suppressed [ 1611.006669][T21234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4776'. [ 1611.086249][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4777'. [ 1611.086537][T21236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1611.167956][T21242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4780'. [ 1611.605394][T21263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4790'. [ 1611.793731][T21276] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4796'. [ 1611.952659][T21284] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4800'. [ 1612.079446][T21284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.139182][T21284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1612.180614][T21284] bond0 (unregistering): Released all slaves [ 1612.269290][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4804'. [ 1612.269314][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4804'. [ 1612.602065][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.602139][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.707588][T21314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4814'. [ 1613.403708][T21353] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4832'. [ 1613.572537][T21353] bond0 (unregistering): left allmulticast mode [ 1613.572564][T21353] bond_slave_0: left allmulticast mode [ 1613.572583][T21353] bond_slave_1: left allmulticast mode [ 1613.572603][T21353] bond0 (unregistering): left promiscuous mode [ 1613.572614][T21353] bond_slave_0: left promiscuous mode [ 1613.572873][T21353] bond_slave_1: left promiscuous mode [ 1613.809242][T21353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1613.890417][T21353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1613.964229][T21353] bond0 (unregistering): Released all slaves [ 1614.381867][T21383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1614.744088][T21399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1616.168956][T21468] __nla_validate_parse: 14 callbacks suppressed [ 1616.168977][T21468] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4888'. [ 1616.513070][T21477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4893'. [ 1616.513231][T21477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1616.580810][T18999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1616.596174][T18999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1616.610017][T18999] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1616.612645][T18999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1616.615394][T18999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1616.690966][T21485] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4895'. [ 1616.694638][T21485] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4895'. [ 1616.913326][T21490] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4898'. [ 1617.144880][T21499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4902'. [ 1617.306405][T21506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4903'. [ 1617.306569][T21506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1617.381592][T21478] chnl_net:caif_netlink_parms(): no params data found [ 1617.750957][T21521] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4910'. [ 1617.865992][T21526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4912'. [ 1617.878844][T15495] syz_tun (unregistering): left allmulticast mode [ 1618.579268][T21478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.579410][T21478] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.579656][T21478] bridge_slave_0: entered allmulticast mode [ 1618.585263][T21478] bridge_slave_0: entered promiscuous mode [ 1618.744671][T21550] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4924'. [ 1618.779630][T18999] Bluetooth: hci4: command tx timeout [ 1618.857213][ T1454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.943570][T21478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.943753][T21478] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.944007][T21478] bridge_slave_1: entered allmulticast mode [ 1618.945822][T21478] bridge_slave_1: entered promiscuous mode [ 1619.081497][T21478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.085318][T21478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.467769][ T1454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.551281][T21478] team0: Port device team_slave_0 added [ 1619.555219][T21478] team0: Port device team_slave_1 added [ 1619.807493][ T1454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.884442][T21478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1619.884458][T21478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.884483][T21478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1620.082484][T21478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1620.082501][T21478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.082525][T21478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.361034][ T1454] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.712369][T21478] hsr_slave_0: entered promiscuous mode [ 1620.719232][T21478] hsr_slave_1: entered promiscuous mode [ 1620.722835][T21478] debugfs: 'hsr0' already exists in 'hsr' [ 1620.722858][T21478] Cannot create hsr debugfs directory [ 1620.839448][T18999] Bluetooth: hci4: command tx timeout [ 1621.599417][ T1454] bridge_slave_1: left allmulticast mode [ 1621.599443][ T1454] bridge_slave_1: left promiscuous mode [ 1621.599643][ T1454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.693069][ T1454] bridge_slave_0: left allmulticast mode [ 1621.693089][ T1454] bridge_slave_0: left promiscuous mode [ 1621.693259][ T1454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.905762][T21660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1621.961264][T21662] __nla_validate_parse: 2 callbacks suppressed [ 1621.961283][T21662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4977'. [ 1622.751458][T21684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1622.925266][T18999] Bluetooth: hci4: command tx timeout [ 1622.955597][T21692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4991'. [ 1623.179001][T21694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4992'. [ 1623.199858][ T1454] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1623.534218][ T1454] bond1 (unregistering): Released all slaves [ 1623.763572][T21691] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 1624.159569][T21716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5002'. [ 1624.642852][T21742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5015'. [ 1624.998413][T18999] Bluetooth: hci4: command tx timeout [ 1625.187446][T21760] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 1625.714658][T21791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5030'. [ 1626.057907][ T1454] hsr_slave_0: left promiscuous mode [ 1626.088636][ T1454] hsr_slave_1: left promiscuous mode [ 1626.091835][ T1454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1626.144582][ T1454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1626.144609][ T1454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1626.241476][ T1454] veth1_macvtap: left promiscuous mode [ 1626.241581][ T1454] veth0_macvtap: left promiscuous mode [ 1626.241817][ T1454] veth1_vlan: left promiscuous mode [ 1626.241988][ T1454] veth0_vlan: left promiscuous mode [ 1627.404716][ T1454] team0 (unregistering): Port device team_slave_1 removed [ 1627.492550][ T1454] team0 (unregistering): Port device C removed [ 1627.939910][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5068'. [ 1628.590783][T21901] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5081'. [ 1628.591194][T21898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5081'. [ 1628.592264][T21898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5081'. [ 1628.592837][T21898] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5081'. [ 1628.734078][T21478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1628.872110][T21478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1629.013676][T21478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1629.059281][T21478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1629.422719][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5093'. [ 1629.504416][T21478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1629.546995][T21478] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.564323][T19760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.584572][T19760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1629.608822][T19198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.608928][T19198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.353784][T21478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1630.466537][T21973] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1630.521334][T21478] veth0_vlan: entered promiscuous mode [ 1630.542651][T21978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5106'. [ 1630.569626][T21478] veth1_vlan: entered promiscuous mode [ 1630.702127][T21478] veth0_macvtap: entered promiscuous mode [ 1630.740298][T21478] veth1_macvtap: entered promiscuous mode [ 1630.784807][T21478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1630.818483][T21478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1630.858174][T19198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.862200][T19198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.862462][T19198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.863025][T19198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.404877][T17987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.404898][T17987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.560101][T19760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.560123][T19760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.742450][T22002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5116'. [ 1632.533949][T22030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5128'. [ 1633.400449][T22053] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5142'. [ 1634.129394][T22084] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5154'. [ 1636.187603][T22166] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5194'. [ 1637.461404][T22219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5218'. [ 1637.986777][T22237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5226'. [ 1638.715380][T22262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5238'. [ 1641.058367][T22364] tun0: tun_chr_ioctl cmd 1074025677 [ 1641.058534][T22364] tun0: linktype set to 774 [ 1642.538380][T22429] netlink: 'syz.0.5319': attribute type 16 has an invalid length. [ 1642.538402][T22429] netlink: 'syz.0.5319': attribute type 17 has an invalid length. [ 1642.541355][T22429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5319'. [ 1642.667707][T22433] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5320'. [ 1642.668840][T22433] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5320'. [ 1642.669333][T22433] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5320'. [ 1642.974989][T22444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5326'. [ 1643.096126][T22457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1643.767564][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5345'. [ 1643.925883][T22505] netlink: 'syz.3.5353': attribute type 1 has an invalid length. [ 1644.598971][T22529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5365'. [ 1644.706344][T22535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5368'. [ 1644.879171][T22544] siw: device registration error -23 [ 1645.130493][T22560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1645.422938][T22576] sch_tbf: peakrate 188 is lower than or equals to rate 7012629537550284465 ! [ 1645.691414][T22591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1645.959356][T22605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5399'. [ 1645.960411][T22605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5399'. [ 1646.268658][T22620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1646.436576][T22631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5412'. [ 1647.477763][T22689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5440'. [ 1647.598750][T22689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5440'. [ 1648.125503][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1648.168555][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1648.172610][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1648.197955][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1648.203132][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1648.588667][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5455'. [ 1648.589275][T12169] syz_tun (unregistering): left allmulticast mode [ 1648.774535][T22739] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5464'. [ 1648.774557][T22739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5464'. [ 1649.648650][T22746] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5465'. [ 1649.652109][T22750] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5465'. [ 1649.653298][T22753] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5465'. [ 1649.841079][T22767] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5476'. [ 1649.841099][T22767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5476'. [ 1650.278198][T18999] Bluetooth: hci1: command tx timeout [ 1650.325102][T22769] kernel profiling enabled (shift: 9) [ 1650.630786][T12309] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.439219][T22711] chnl_net:caif_netlink_parms(): no params data found [ 1651.658548][T22804] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5489'. [ 1651.658570][T22804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5489'. [ 1651.870967][T22814] siw: device registration error -23 [ 1652.108496][T12309] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.358336][T18999] Bluetooth: hci1: command tx timeout [ 1652.478250][T14525] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1652.521648][T12309] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1652.631233][T14525] usb 2-1: Using ep0 maxpacket: 8 [ 1652.636770][T14525] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1652.636825][T14525] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1652.636844][T14525] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1652.636865][T14525] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1652.636886][T14525] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1652.636927][T14525] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1652.636947][T14525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.996293][T14525] usb 2-1: usb_control_msg returned -32 [ 1653.006435][T14525] usbtmc 2-1:16.0: can't read capabilities [ 1653.083468][T12309] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.285064][T22711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.285258][T22711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.285513][T22711] bridge_slave_0: entered allmulticast mode [ 1653.287974][T22711] bridge_slave_0: entered promiscuous mode [ 1653.568329][T22711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.568452][T22711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.568705][T22711] bridge_slave_1: entered allmulticast mode [ 1653.648311][T22711] bridge_slave_1: entered promiscuous mode [ 1653.668322][T22867] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -71 [ 1653.784027][T22871] zonefs (nullb0) ERROR: Not a zoned block device [ 1654.298272][ T1237] usb 2-1: USB disconnect, device number 22 [ 1654.438124][T18999] Bluetooth: hci1: command tx timeout [ 1654.578881][T22711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1654.597223][T22711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1654.909690][T22711] team0: Port device team_slave_0 added [ 1654.949529][T22711] team0: Port device team_slave_1 added [ 1655.535180][T22900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1656.039745][T22711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1656.039763][T22711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.039788][T22711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1656.094905][T22711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1656.094923][T22711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.094948][T22711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1656.376755][T12309] bridge_slave_1: left allmulticast mode [ 1656.376783][T12309] bridge_slave_1: left promiscuous mode [ 1656.377011][T12309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.499310][T12309] bridge_slave_0: left allmulticast mode [ 1656.499330][T12309] bridge_slave_0: left promiscuous mode [ 1656.499489][T12309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.518258][T18999] Bluetooth: hci1: command tx timeout [ 1657.123456][T22942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5540'. [ 1657.123670][T22942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5540'. [ 1657.258983][T12309] ip6gretap0 (unregistering): left allmulticast mode [ 1657.738922][T12309] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1657.901513][T12309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.959857][T12309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.003240][T12309] bond0 (unregistering): Released all slaves [ 1658.025341][T12309] bond1 (unregistering): Released all slaves [ 1658.047963][T12309] bond2 (unregistering): Released all slaves [ 1658.067592][T12309] bond3 (unregistering): Released all slaves [ 1658.179905][T22711] hsr_slave_0: entered promiscuous mode [ 1658.184500][T22711] hsr_slave_1: entered promiscuous mode [ 1659.609253][T23022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5573'. [ 1661.270462][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5589'. [ 1661.278233][T15870] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1661.433372][T15870] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1661.435201][T15870] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1661.438974][T15870] usb 3-1: string descriptor 0 read error: -22 [ 1661.439120][T15870] usb 3-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice= 0.40 [ 1661.439142][T15870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.487529][T15870] usb 3-1: unit 4 not found! [ 1661.747164][T15870] usb 3-1: USB disconnect, device number 28 [ 1664.334124][T23076] zonefs (nullb0) ERROR: Not a zoned block device [ 1665.558481][T12309] hsr_slave_0: left promiscuous mode [ 1665.598432][T12309] hsr_slave_1: left promiscuous mode [ 1665.600893][T12309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.651468][T12309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.651497][T12309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.756099][T12309] veth1_macvtap: left promiscuous mode [ 1665.756152][T12309] veth0_macvtap: left promiscuous mode [ 1665.756288][T12309] veth1_vlan: left promiscuous mode [ 1665.756430][T12309] veth0_vlan: left promiscuous mode [ 1665.833596][ T37] audit: type=1800 audit(1773058797.732:2): pid=23111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.5609" name="/" dev="fuse" ino=3 res=0 errno=0 [ 1665.857553][T23137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5623'. [ 1666.628721][T12309] team0 (unregistering): Port device team_slave_1 removed [ 1666.677324][T12309] team0 (unregistering): Port device team_slave_0 removed [ 1667.299663][T23156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5631'. [ 1668.145151][T22711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1668.760985][T22711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1668.837221][T22711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1668.901205][T23197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5641'. [ 1669.004473][T22711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1669.743095][T22711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.763887][T23224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5647'. [ 1669.865328][T22711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1669.915458][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.916308][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1669.971822][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.971961][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1671.061355][T22711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1671.154063][T23275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5664'. [ 1672.198872][T23303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5674'. [ 1672.789575][T22711] veth0_vlan: entered promiscuous mode [ 1672.817462][T22711] veth1_vlan: entered promiscuous mode [ 1672.911282][T22711] veth0_macvtap: entered promiscuous mode [ 1672.941758][T22711] veth1_macvtap: entered promiscuous mode [ 1672.975059][T22711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1673.039822][T22711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1673.046787][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.047013][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.047063][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.047094][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.200263][T23325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5679'. [ 1673.548189][ T5916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.548210][ T5916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.579858][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5685'. [ 1673.813733][T12309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.813755][T12309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.044224][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.044289][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.754065][T23362] zonefs (nullb0) ERROR: Not a zoned block device [ 1674.793026][ T994] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1674.998533][ T994] usb 2-1: Using ep0 maxpacket: 8 [ 1675.000967][ T994] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1675.000994][ T994] usb 2-1: config 179 has no interface number 0 [ 1675.001037][ T994] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1675.001058][ T994] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1675.001080][ T994] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1675.001103][ T994] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1675.001124][ T994] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1675.001175][ T994] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1675.001196][ T994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.008359][T23360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1675.605966][T14525] usb 2-1: USB disconnect, device number 23 [ 1675.605963][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1675.606022][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1675.672256][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5698'. [ 1677.770563][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5714'. [ 1679.325253][ T994] IPVS: starting estimator thread 0... [ 1679.411326][T14525] IPVS: starting estimator thread 0... [ 1679.478491][T23474] IPVS: using max 9 ests per chain, 21600 per kthread [ 1679.498253][T23480] IPVS: using max 9 ests per chain, 21600 per kthread [ 1681.648756][T23530] netlink: 'syz.1.5761': attribute type 1 has an invalid length. [ 1683.436556][T23552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5773'. [ 1683.583904][T23560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5775'. [ 1684.966065][T23583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5785'. [ 1684.991002][T23585] No control pipe specified [ 1685.788185][T14525] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1685.948118][T14525] usb 3-1: Using ep0 maxpacket: 8 [ 1685.964057][T14525] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1685.964084][T14525] usb 3-1: config 179 has no interface number 0 [ 1685.964129][T14525] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1685.964153][T14525] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1685.964178][T14525] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1685.964200][T14525] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1685.964233][T14525] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1685.964273][T14525] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1685.964292][T14525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.093877][T23591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1686.492019][T23614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5798'. [ 1686.537929][T12045] usb 3-1: USB disconnect, device number 29 [ 1686.537986][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1686.538079][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1687.170580][T14525] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1687.199245][T23627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5803'. [ 1687.575981][T14525] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1687.577205][T14525] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1687.586024][T14525] usb 1-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice= 0.40 [ 1687.586051][T14525] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.586069][T14525] usb 1-1: Product: syz [ 1687.586082][T14525] usb 1-1: Manufacturer: syz [ 1687.586093][T14525] usb 1-1: SerialNumber: syz [ 1688.842949][T23644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5812'. [ 1688.870560][T14525] usb 1-1: USB disconnect, device number 26 [ 1689.063124][T22901] udevd[22901]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1689.507330][T23671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1690.671589][T23679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5825'. [ 1691.338228][ T8851] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1691.492716][ T8851] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1691.493802][ T8851] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1691.495861][ T8851] usb 1-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice= 0.40 [ 1691.495883][ T8851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.495892][ T8851] usb 1-1: Product: syz [ 1691.495899][ T8851] usb 1-1: Manufacturer: syz [ 1691.495906][ T8851] usb 1-1: SerialNumber: syz [ 1691.954318][ T8851] usb 1-1: USB disconnect, device number 27 [ 1693.033305][T22901] udevd[22901]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1694.638755][T23736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5850'. [ 1695.368151][T14525] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1695.759269][T23778] zonefs (nullb0) ERROR: Not a zoned block device [ 1696.027010][T14525] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1696.073615][T14525] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1696.154526][T14525] usb 3-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice= 0.40 [ 1696.154600][T14525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.154649][T14525] usb 3-1: Product: syz [ 1696.154685][T14525] usb 3-1: Manufacturer: syz [ 1696.154731][T14525] usb 3-1: SerialNumber: syz [ 1696.892041][T14525] usb 3-1: USB disconnect, device number 30 [ 1697.013539][T22901] udevd[22901]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1699.318196][T15870] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1699.428142][T14525] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1699.473470][T15870] usb 6-1: Using ep0 maxpacket: 16 [ 1699.476522][T15870] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1699.476547][T15870] usb 6-1: config 0 has no interface number 0 [ 1699.476587][T15870] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1699.476601][T15870] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1699.502504][T15870] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1699.502533][T15870] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1699.502551][T15870] usb 6-1: Product: syz [ 1699.502564][T15870] usb 6-1: SerialNumber: syz [ 1699.507599][T15870] usb 6-1: config 0 descriptor?? [ 1699.515532][T15870] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1699.522334][T15870] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input10 [ 1699.557958][T12045] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1699.654934][T14525] usb 4-1: config 0 has no interfaces? [ 1699.654970][T14525] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1699.654990][T14525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.687413][T14525] usb 4-1: config 0 descriptor?? [ 1699.718188][T12045] usb 2-1: Using ep0 maxpacket: 8 [ 1699.720927][T12045] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1699.720954][T12045] usb 2-1: config 179 has no interface number 0 [ 1699.721050][T12045] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1699.721075][T12045] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1699.721099][T12045] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1699.721123][T12045] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1699.721198][T12045] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1699.721237][T12045] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1699.721257][T12045] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.752899][T23871] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1700.960430][T12045] ================================================================== [ 1700.960449][T12045] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 1700.960558][T12045] Read of size 8 at addr ffffc900101e9008 by task kworker/1:0/12045 [ 1700.960574][T12045] [ 1700.960596][T12045] CPU: 1 UID: 0 PID: 12045 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1700.960618][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1700.960630][T12045] Workqueue: usb_hub_wq hub_event [ 1700.960699][T12045] Call Trace: [ 1700.960710][T12045] [ 1700.960718][T12045] dump_stack_lvl+0xe8/0x150 [ 1700.960743][T12045] print_report+0xba/0x230 [ 1700.960764][T12045] ? __list_add_valid_or_report+0x4e/0x130 [ 1700.960781][T12045] kasan_report+0x117/0x150 [ 1700.960836][T12045] ? __list_add_valid_or_report+0x4e/0x130 [ 1700.960857][T12045] __list_add_valid_or_report+0x4e/0x130 [ 1700.960875][T12045] kcov_remote_stop+0x457/0x680 [ 1700.960898][T12045] hub_event+0x49d8/0x4f60 [ 1700.960939][T12045] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1700.960962][T12045] ? __pfx_hub_event+0x10/0x10 [ 1700.960989][T12045] ? process_scheduled_works+0xa25/0x1830 [ 1700.961011][T12045] ? process_scheduled_works+0xa25/0x1830 [ 1700.961033][T12045] process_scheduled_works+0xb02/0x1830 [ 1700.961067][T12045] ? __pfx_process_scheduled_works+0x10/0x10 [ 1700.961097][T12045] ? assign_work+0x3d5/0x5e0 [ 1700.961119][T12045] worker_thread+0xa50/0xfc0 [ 1700.961140][T12045] ? preempt_schedule_thunk+0x16/0x30 [ 1700.961160][T12045] ? preempt_schedule_common+0x82/0xd0 [ 1700.961252][T12045] kthread+0x388/0x470 [ 1700.961269][T12045] ? __pfx_worker_thread+0x10/0x10 [ 1700.961290][T12045] ? __pfx_kthread+0x10/0x10 [ 1700.961307][T12045] ret_from_fork+0x51e/0xb90 [ 1700.961330][T12045] ? __pfx_ret_from_fork+0x10/0x10 [ 1700.961351][T12045] ? __switch_to+0xc7d/0x1450 [ 1700.961373][T12045] ? __pfx_kthread+0x10/0x10 [ 1700.961391][T12045] ret_from_fork_asm+0x1a/0x30 [ 1700.961412][T12045] [ 1700.961418][T12045] [ 1700.961422][T12045] The buggy address belongs to a vmalloc virtual mapping [ 1700.961437][T12045] Memory state around the buggy address: [ 1700.961446][T12045] ffffc900101e8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1700.961458][T12045] ffffc900101e8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1700.961469][T12045] >ffffc900101e9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1700.961477][T12045] ^ [ 1700.961487][T12045] ffffc900101e9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1700.961496][T12045] ffffc900101e9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1700.961503][T12045] ================================================================== [ 1700.961538][T12045] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1700.961552][T12045] CPU: 1 UID: 0 PID: 12045 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1700.961571][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1700.961603][T12045] Workqueue: usb_hub_wq hub_event [ 1700.961626][T12045] Call Trace: [ 1700.961633][T12045] [ 1700.961640][T12045] vpanic+0x56c/0xa60 [ 1700.961664][T12045] ? __pfx_vpanic+0x10/0x10 [ 1700.961686][T12045] ? __pfx___schedule+0x10/0x10 [ 1700.961707][T12045] panic+0xc5/0xd0 [ 1700.961727][T12045] ? __pfx_panic+0x10/0x10 [ 1700.961749][T12045] ? preempt_schedule_thunk+0x16/0x30 [ 1700.961772][T12045] ? __list_add_valid_or_report+0x4e/0x130 [ 1700.961787][T12045] check_panic_on_warn+0x89/0xb0 [ 1700.961804][T12045] ? __list_add_valid_or_report+0x4e/0x130 [ 1700.961819][T12045] end_report+0x73/0x180 [ 1700.961842][T12045] ? __list_add_valid_or_report+0x4e/0x130 [ 1700.961857][T12045] kasan_report+0x128/0x150 [ 1700.961880][T12045] ? __list_add_valid_or_report+0x4e/0x130 [ 1700.961899][T12045] __list_add_valid_or_report+0x4e/0x130 [ 1700.961917][T12045] kcov_remote_stop+0x457/0x680 [ 1700.961939][T12045] hub_event+0x49d8/0x4f60 [ 1700.961979][T12045] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1700.962003][T12045] ? __pfx_hub_event+0x10/0x10 [ 1700.962029][T12045] ? process_scheduled_works+0xa25/0x1830 [ 1700.962049][T12045] ? process_scheduled_works+0xa25/0x1830 [ 1700.962071][T12045] process_scheduled_works+0xb02/0x1830 [ 1700.962103][T12045] ? __pfx_process_scheduled_works+0x10/0x10 [ 1700.962125][T12045] ? assign_work+0x3d5/0x5e0 [ 1700.962144][T12045] worker_thread+0xa50/0xfc0 [ 1700.962163][T12045] ? preempt_schedule_thunk+0x16/0x30 [ 1700.962181][T12045] ? preempt_schedule_common+0x82/0xd0 [ 1700.962206][T12045] kthread+0x388/0x470 [ 1700.962231][T12045] ? __pfx_worker_thread+0x10/0x10 [ 1700.962250][T12045] ? __pfx_kthread+0x10/0x10 [ 1700.962267][T12045] ret_from_fork+0x51e/0xb90 [ 1700.962289][T12045] ? __pfx_ret_from_fork+0x10/0x10 [ 1700.962309][T12045] ? __switch_to+0xc7d/0x1450 [ 1700.962328][T12045] ? __pfx_kthread+0x10/0x10 [ 1700.962345][T12045] ret_from_fork_asm+0x1a/0x30 [ 1700.962367][T12045] [ 1700.962651][T12045] Kernel Offset: disabled